PT-2026-3103 · Juniper Networks · Paragon Automation+3

Published 2026-01-15 · Updated 2026-01-16 · CVE-2025-52987

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Juniper Networks Paragon Automation (Pathfinder, Planner, Insights) versions prior to 24.1.1

Description A clickjacking issue exists in the web portal of Juniper Networks Paragon Automation (Pathfinder, Planner, Insights). This is due to the application not setting appropriate X-Frame-Options and X-Content-Type HTTP headers, which could allow an attacker to trick users into interacting with the interface under the attacker’s control.

Recommendations Update to version 24.1.1 or later.

Fix

Clickjacking

Weakness Enumeration

CWE-1021

Related Identifiers

CVE-2025-52987

Affected Products

Insights

Paragon Automation

Pathfinder

Planner

References · 7

• https://supportportal.juniper.net · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-52987 · Vendor Advisory
• https://kb.juniper.net/JSA103145 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-52987 · Security Note
• https://twitter.com/transilienceai/status/2012004831498813823 · Twitter Post
• https://twitter.com/CVEnew/status/2011926056945795326 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2011997287803654506 · Twitter Post